Network Security

IEEE 802.1x is the standard for port-based network access control, which provides authentication between a device and a RADIUS server. While EAP is used within 802.1x, 802.1x is the framework for the connection.

Kerberos is a network authentication protocol that uses a ticketing system to allow nodes to prove their identity over a non-secure network, enabling single sign-on capabilities.

EAP (Extensible Authentication Protocol) is an authentication framework that provides transport for various authentication methods between a client and an authenticator, such as a RADIUS server.

CHAP (Challenge Handshake Authentication Protocol) uses a three-way handshake and a shared secret to verify the identity of a client without sending the password over the network.

SSO (Single Sign-On) is an authentication scheme that allows a user to log in with a single ID and password to gain access to multiple related software systems.

Crimeware is a class of malware designed specifically to facilitate illegal activities, often incorporating keyloggers to steal credentials or financial information.

Spyware is software that enables a user to obtain covert information about another's computer activities by transmitting data covertly from their hard drive, often using tracking cookies.

A rootkit is a collection of computer software designed to enable access to a computer or an area of its software that is not otherwise allowed, often masking its presence from anti-malware tools.

A Trojan horse can be used to install a backdoor, which allows an attacker to control the infected computer remotely, effectively turning it into a zombie in a botnet.

A worm is a standalone malware that replicates itself to spread to other computers, often consuming significant network bandwidth in the process. Trojans and rootkits have different primary functions, such as masquerading as legitimate software or hiding malicious processes.

Polymorphic viruses use a mutation engine to change their own code or signature each time they replicate, which helps them evade detection by signature-based antivirus software. The other options refer to different types of viruses or malware that do not inherently possess this specific evasion mechanism.

Vishing is a combination of 'voice' and 'phishing', referring to social engineering attacks conducted over voice communication channels like VoIP or telephone. Whaling and phishing are broader terms that do not specifically denote the VoIP medium.

RFID stands for Radio Frequency Identification. It is a technology used for tracking and identifying objects or people using radio waves.

Turnstiles, keycode locks, and mantraps are standard physical access control measures. An 'apply list' is not a standard industry term for a physical security prevention method.

Access, perimeter, and inter-facility are recognized layers of physical defense. Network is a logical layer of the OSI model, not a standard category of physical defense layers.

The three standard pillars of physical security are prevention, detection, and recovery. Intervention is not typically listed as one of the primary three factors.